comberton-pool.org.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f0:61:11:f7:ac:57:e0:20:d2:c2:eb:95:9b:ec:35:ef:26 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=comberton-pool.org.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f0:61:11:f7:ac:57:e0:20:d2:c2:eb:95:9b:ec:35:ef:26
Serial Number (int): 343133654264353315307480659265149417680678
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5c:0d:63:fa:ed:37:cd:e7:ca:eb:ec:c0:fc:32:7a:9d:d2:ca:21:77
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 32:cd:b4:63:59:50:44:e9:40:92:40:f8:f6:c1:cb:2d:08:82:b9:e7
Fingerprint (sha256): 95:bc:0d:1a:5f:40:29:bb:12:b3:58:78:94:ac:56:b4:2c:de:d5:eb:70:4e:91:09:6c:6a:ba:73:93:1d:e6:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate comberton-pool.org.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for comberton-pool.org.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

comberton-pool.org.uk
www.comberton-pool.org.uk

Other certificates including the domain name comberton-pool.org.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for comberton-pool.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA195AnNVcoBZeUJCjZvVZ
OVgG6QAhmeSjnzcTtDwjjDWnCEs3CTGIjNGQ8lim199oFEQyw4IVJIsKlEwwPCbJ
pCTQdFgXdKSrfmNvuskAkbKDMoEvA1aULGe8Nt2vAMw87IQUXOxPnVxSFJYFPcGl
H502A93itXadVjCYCRyk69N99yxUVeNXWvt7nVX0JGI/wBi9e2DLFA540EGJpmcn
R4hiVSkbZNM2glfpz2yedVTZQCf/PJWjgI4AgTY8/tkwNJIjgpvBaQSOYJ7MpqCa
/2Cf7cwnpQYERBsSbz2e2k3v6BNs05cdMCpzfn8pyfkG62TKWt/KRTymqg5my7eK
rTDBHokMiAjIHDcUf3uhnQtcNkFo8keZAjTCGnUk/VdF+flzU74ytL61MH9Oe/J5
wbxGvEFciN4JMGSdMN5J7SEuEoPoB7FySfacpBmyqAcayhN45g1tSV4mJ7w1YcjW
WZygJleFHrO8F9J364F3QSy+BGsX7vZOG+x2Frnsw0OscCgzTyLE0lqzgc4/8WhA
n0TAmlSaUACsKKbDeodAfLwM1IW940Sn5NrPCLCyznK3lknsaTEPyOhQJHe9Gcxp
Xp23mz2u4Bxswzi/Hg4qurAYhLfHgu7V5rsyd0FzCt7yznpJOtv83WrCkI0Q3huw
9k939P6aor2QXqlI6llA+00CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343133654264353315307480659265149417680678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-17 07:44:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 07:44:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'comberton-pool.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880665313128493585150577017422889784510339839500165824941449891454240743940529878306420025238504819914007412152254482076587754292212606969366725616547074474557109347770861784300869269648269463168313635135970986389266957372652668207368995536542947508988695240138399496690586325507111411109779699797047112773398793858797414965575354960315830962034767857801789788615766174519183213880697777989843592616461733275196364672982073660016225055220436490917007737211011087862326778676934109673973242720293919876741171740204534489356754189858822471144606005822919310413101354601620246367667552471771159709638167452813960217515782470683128702866158599334568399964154007555759237106855875767121460046785432015216076294240592587891982033396020887369174856552620539595674038988495278699919833094136294144022548679783685311912602377534627309556171672202484270325321788908265722131217145727545647449970158891204777725941775379467677538735497105552155453816684325018262367344365665990762000307576967114252523024722881074075376992627892182089570164921834792818472268224437738374056743186524999432591028115287469210989052227242433879375685215322128657129448250028381010191978784747579447283860503735474978081673302717428680315113882421707670042636778317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c0d63faed37cde7caebecc0fc327a9dd2ca2177
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comberton-pool.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comberton-pool.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d3e64a327000004030047304502210094a0f054775267b0caa6f0ce12763074ad52dfc228b5aad6e77243f12460a937022008c19d3693b86bdea84d81c8a5baae4925f1836f71a29fa2ce9134c81ad9668d007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d3e64a31a0000040300473045022100d454915bbde423fb6ee81a98a866cd144b847a5501d51a5079544ff712fbfd9c02207b04bd764233c098effdf4cdb2b9b20edff8f81bce8e34513fb9584c7b9d0217
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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